SrMgr - Data Security and Governance

JOB SUMMARY

 

The Senior Manager will support the development, implementation, and maintenance of the Data Governance strategy for the Company. The role will lead the execution and monitoring of the data governance program to ensure compliance to Company policies, security standards and the common controls framework. This position will meet on a continual basis with various business and technology groups to advise stakeholders and drive adherence to requirements that ensure the quality, integrity, security, and availability of Company data throughout the organization. 

 

CANDIDATE PROFILE

 

Education and Experience

 

Required:

• Bachelor’s degree in Computer Science or related field or equivalent experience/certification 
• 7+ years progressive information technology and/or security experience that includes:
  • 3+ years’ experience with implementing or assessing systems against industry security frameworks including NIST, Cloud Security Alliance, ISO, or PCI that also includes
    • Application of data governance techniques and principles to include applying data classifications or assigning security categorizations
    • Data management or mapping of data usage across business processes and services
    • Interpreting security requirements and communicating with engineering or technical staff
• Demonstrated experience using data modeling techniques and performing validation of the information created
• Experience with creating and writing security policies or standards in support of organizational security programs or system accreditations
• Working knowledge of global privacy standards to include GDPR or CCPA within a digital business 
• Knowledge of big data, cloud computing and data warehouses
• Experience implementing, managing, or governing security technologies, including encryption, network security or intrusion detection tools
• Demonstrated ability to apply information security and privacy policies 
• Experience in business systems and process planning

 

 

Preferred:

• Direct experience with data rights management, data loss prevention or data labeling tools
• Current information security and/or privacy certification, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Information Privacy Professional (CIPP, CIPPT, CIPPM)
• Excellent communication and writing skills along with problem-solving ability
• Experience with Governance, Risk and Compliance (GRC) tools (i.e., ServiceNow or Archer)
• Demonstrated ability to work independently and with others
• Detail oriented with the ability to manage compliance requirements and expectations

 

 

CORE WORK ACTIVITIES

• Analyze new and existing systems against data governance and classification policies to ensure adherence to data security requirements
• Support the development and implementation of an organization wide data governance strategy
• Create and update security policies and procedures to support the data governance program
• Capture, produce, and present to senior leadership metrics that support data governance team’s processes
• Collaborate with business and technology groups to map data within the organization 
• Coordinate with project teams to ensure security requirements are applied based on the data criticality and impact to the organization, including third-party vendors or as part of the software development lifecycle process
• Review project deliverables to identify risks throughout the project life cycle and confirm that the level of risk is acceptable in accordance with Marriott’s policies
• Document, track, and drive the development and implementation of remediation efforts to reduce risk within the organization
• Evaluate and research tool sets that would support the governance, risk, and compliance teams
• Manage the execution of third-party vendors and service providers implementing tasks on behalf of the data governance team

 

 

Maintaining Goals

• Submits reports in a timely manner, ensuring delivery deadlines are met.
• Promotes the documenting of project progress accurately.
• Provides input and assistance to other teams regarding projects.

 

Managing Work, Projects, and Policies 

• Manages and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes in